MadHat Unspecific, InfoSec Mercenary (@unspecific) header
MadHat Unspecific, InfoSec Mercenary (@unspecific) profile picture

cybers thot lead. worshipped idle. dispenser of the obvious. awkward

Internet Security Riot Club
Joined August 2008
Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)Photo by MadHat Unspecific, InfoSec Mercenary (@unspecific)
I don’t think spaz it too thrilled with Becky’s costume.
4
Goes along with another one. AI seems to work better for smart people. It’s a tool that has some decent uses. But you have to understand its limitations and reality of what it can do.
Unpopular opinion: AI won't replace smart people. It'll just make it obvious who isn't.
26
So the con artist who can’t do anything but make empty promises says school is not necessary. Ignorance is how the right leads. Prey on them. Use them. Same reason some don’t want people going to college and learning,experiencing other cultures. Keep them dumb and afraid
Elon Musk says going to medical school is pointless "Everyone will have access to medical care that is better than what the president receives right now" Peter Diamandis: "So don't go into medical school?" Elon Musk: "Yes. Yeah. Pointless. But I would say that applies to any form of education" "5 or 4 years from now, we'll have better medical care than anyone has today, available for everyone"
1
47
Altman is telling you his competition that does not try to be big brother is bad. That does not take as many resources to run is bad. Like Coka-cola saying Pepsi is going to kill you.
sam: local inference is a terrible allocation of scarce resources “a lot of people want local inference, and somehow they assume that the problem is solved now because we have open-source models, we're going to be able to run them on our computers, and so we're not going to need all the stuff in the data centre but from a global allocation perspective, actually it's quite terrible to have everybody, like, have a bunch of the world's limited supply of DRAM sitting in their own computer and being used five percent of the time you want maximum utilisation in the cloud if you're trying to deal with this very supply-constrained environment somehow many people's intuition is the opposite of that”
29
Making things up or projecting your own insecurities does not make it true. Most of the technical people I know are fine, except for those who are unemployed. AI does not diminish real skills or value. It is a tool. If you are worried about being inadequate, that is on you.
very weird thing happening rn technical people are sad, they think their skills are now useless non-technical people are desperately wishing they were more technical so they could use agents better
22
Mostly true. It isn’t black and white. The LLM has practical uses. But when people bought into the AI hype and tried to use it for everything it failed. It’s not like every company is just ditching AI.
BREAKING: Employers worldwide are pulling back on AI as they navigate a flood of errors and low-quality work that sap employee time, raise privacy and security risks, and drive up costs, per the Guardian.
1
94
I just heard a radio ad. Become a cybersecurity expert in just 4 months. No. You won’t be an expert in 4 months. You might be able to talk the talk, but trying to get a cybersecurity job in this market with 4 months of training is not going to get you far.
1
38
Finally hit me. See the code we built. Run a security check. Identified some Issues. I ask to validate. Claude: Fuck you user. You can’t test your own code.
47
This is such an accurate map. Thank you for sharing. I’m sure it was vibe coded.
LIVE pew pew map of all the php2shell exploits
1
6
573
And this is why we will never get rid of bugs and vulnerabilities. Just say fuck it and ship it. Such horrible advice.
i still hear engineers say "but that code won't be maintainable" you are never going to read it, and the next model + harness will be better and fix it now is the time to ship, not worry about maintenance
43
MadHat Unspecific, InfoSec Mercenary retweeted
Spotted at @unprompted: "Models agreeing with models is not truth" :-)
11
6
45
2,498
Seriously. If you have an issue with how we performed an audit or the report, explain. Tell me what was wrong. Don’t just say we need all the evidence because that won’t happen.
1
97
Visibility is the key to infosec. Knowing what you have and what it is doing is necessary. Services hiding that data are doing their clients a disservice in the name a greed. I think every service should offer audit logs as one of the base requirements.
Worth noting that a lot of SaaS applications have dogshit audit logs they barely make available. You can’t easily monitor these systems to catch attacks. They also often make audit logs an enterprise-plan feature. Now would be a good time to change that.
2
1
7
328
MadHat Unspecific, InfoSec Mercenary retweeted
They’re calling this Black October in cybersecurity. It’s like the apocalypse except instead of dying people had to update dependencies. Someone’s API keys got stolen. Also some people asked AI agents to access their bank account. I’m a very serious person.
49
32
5
349
9,738
MadHat Unspecific, InfoSec Mercenary retweeted
People are going to lose their mind when they realize its actually easier to hack things using FEATURES not CVEs.
22
81
22
591
51,967
Sensationalism. AWS gave up on having a frontier model and refocused to not compete with the real frontier models. They are expanding in their hosting and infrastructure around AI.
This quoted post is unavailable.
2
183
This is fear mongering. This is not based on reality. AI has not defeated auth. Not even close. It has trouble logging with credentials. This is more lies from the king of AI psychosis. The number 1 mislead daydreamer following the sound of AI as if it were accurate
Sam Altman: AI has fully defeated most of the ways people authenticate today. “Voiceprints as authentication are a crazy thing to still be doing. AI has fully defeated that.” “I am very nervous that we have a significant impending fraud crisis.” “Just because we’re not releasing the technology doesn’t mean it doesn’t exist.” “Soon, a video FaceTime will be indistinguishable from reality.” “People are going to have to change the way they verify who they’re actually talking to.”
68
Just helped a user troubleshoot an AI issue. It insisted it was blocked from a website and said to contact IT. It confused a 404 on a dir with no index meant it was being filtered. Said to tell IT to whitelist the domain to fix the issue. There was no real issue.
2
158
Wait. Didn’t we figure this out not long after smart phones? And everyone said it was bad but then accepted it so they could log on Facebook and be a bigot.
Idiots the fucking lot of ya
2
2
152